dflydev/dot-access-data

The package has clear documentation, repository tests, a stable MIT license, and a very small dependency surface. Its automated build uses eight unpinned actions, and the project has been quiet since the July 2024 release. Pin v3.0.3 if adopting it.

Latest v3.0.3

Packagist

65%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has been published since 2012, but it has had no registry release in roughly two years and only eight releases overall, indicating a slow maintenance cadence.

Repo commit activity

There were no commits and no active maintainers in the preceding three months, consistent with a project that has been quiet since its July 2024 release.

Repo issue activity

There were no new or closed issues or pull requests in the preceding month, providing no evidence of current issue maintenance.

Security policy

The repository has no security policy file, which is a minor transparency gap for reporting and handling vulnerabilities.

Workflow audit

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings. However, all eight action references are unpinned, leaving a supply-chain hygiene gap.